Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143141.roa
File:                     AS143141.roa (raw, json)
Hash identifier:          dRSdtBcl5AVhi9WwMobMXggVSjRvrj3QkdorhMum/aw=
Subject key identifier:   4B:32:87:25:0F:71:FE:4F:FA:C0:30:63:95:39:38:60:63:55:95:1C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       495FA5CC4463A671EC04BA78891B79283504E7F6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143141.roa
Signing time:             Fri 22 May 2026 07:25:02 +0000
ROA not before:           Fri 22 May 2026 07:20:02 +0000
ROA not after:            Fri 21 May 2027 07:25:02 +0000
asID:                     143141
IP address blocks:        240a:a1eb::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5f:a5:cc:44:63:a6:71:ec:04:ba:78:89:1b:79:28:35:04:e7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:20:02 2026 GMT
            Not After : May 21 07:25:02 2027 GMT
        Subject: CN=4B3287250F71FE4FFAC03063953938606355951C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:f8:b4:91:10:86:7b:99:8c:d4:b7:d8:e2:
                    43:22:9f:5c:92:e9:9a:68:92:d8:d3:30:a8:24:f4:
                    42:d2:e8:1a:13:19:ee:f0:b9:a5:e0:9c:28:62:e0:
                    eb:67:3d:ad:3f:63:f2:0a:ad:cb:99:28:d5:0d:7b:
                    0a:ac:49:cb:09:ed:99:62:3b:10:42:06:a4:d8:16:
                    94:df:be:3b:26:26:ec:19:35:30:c2:f7:bc:6b:73:
                    54:26:b5:00:67:7f:1d:4e:ed:3d:ee:e4:74:b1:63:
                    0e:31:56:11:35:db:45:55:7a:b3:f0:da:27:bd:9e:
                    e1:1b:af:59:85:0b:00:ff:38:bc:78:44:85:29:8a:
                    78:15:4e:91:48:b7:38:2e:cc:f7:2d:a5:98:8e:81:
                    3f:09:72:6b:b8:12:cf:ec:cc:94:06:6c:be:cd:32:
                    67:ae:15:fc:46:96:e5:cb:da:86:51:2f:be:8e:50:
                    7b:ea:74:38:59:f1:12:bf:3e:92:ca:47:64:86:40:
                    d1:d3:69:3e:24:3b:75:62:d5:39:a5:87:d8:a5:a8:
                    4c:66:b5:d8:45:38:b1:ff:58:b2:56:9a:9e:e5:56:
                    1b:91:c9:21:ec:00:ed:e0:1c:3e:b2:ba:fa:dd:97:
                    0b:9d:05:12:03:7b:ea:44:de:9e:7b:68:5a:69:97:
                    76:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:32:87:25:0F:71:FE:4F:FA:C0:30:63:95:39:38:60:63:55:95:1C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143141.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1eb::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:89:bb:12:82:32:84:a8:ed:35:52:4c:ee:17:52:7f:f0:7e:
         59:12:f4:6a:a4:00:35:23:95:7e:73:60:84:fd:4d:35:fb:e5:
         ab:7d:e0:85:c4:9b:c8:60:75:77:e3:67:5c:14:0f:04:d1:a0:
         43:3b:31:ae:95:63:3f:d3:15:0e:9e:7e:ed:c0:d0:80:17:5a:
         88:1f:b3:ce:79:0c:f5:fe:26:f3:bc:d3:24:f3:ff:1f:29:9a:
         cc:11:08:43:2b:9a:76:a7:8f:9e:14:5f:80:48:9e:71:84:85:
         4f:fa:89:52:67:5e:2c:ad:50:3d:e3:91:23:81:06:9d:b7:3e:
         af:41:a8:4d:e9:2a:28:1c:46:66:e9:25:de:6d:bd:8d:27:bf:
         89:c8:d1:59:f1:27:4e:d9:58:3c:7c:7e:df:ca:8b:1e:bf:d2:
         44:8b:11:3e:2f:98:e7:4f:36:0e:d4:8a:ab:17:97:ff:a6:c1:
         65:19:e0:57:84:12:a2:bc:1a:b5:9c:14:42:6d:f8:f0:6a:e9:
         22:8c:0c:3f:f1:40:46:1a:00:b4:5c:5a:2f:65:ed:32:a4:4e:
         3d:94:e9:59:7b:f8:5a:c0:22:5f:60:f1:a0:b5:b2:7a:2a:f0:
         f2:16:2d:4c:0e:4a:ac:a8:8c:40:85:46:d5:ab:df:8e:07:b7:
         b1:62:59:42
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSV+lzERjpnHsBLp4iRt5KDUE5/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzIwMDJaFw0yNzA1MjEwNzI1MDJaMDMxMTAvBgNV
BAMTKDRCMzI4NzI1MEY3MUZFNEZGQUMwMzA2Mzk1MzkzODYwNjM1NTk1MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuFPi0kRCGe5mM1LfY4kMin1yS
6ZpoktjTMKgk9ELS6BoTGe7wuaXgnChi4OtnPa0/Y/IKrcuZKNUNewqsScsJ7Zli
OxBCBqTYFpTfvjsmJuwZNTDC97xrc1QmtQBnfx1O7T3u5HSxYw4xVhE120VVerPw
2ie9nuEbr1mFCwD/OLx4RIUpingVTpFItzguzPctpZiOgT8Jcmu4Es/szJQGbL7N
MmeuFfxGluXL2oZRL76OUHvqdDhZ8RK/PpLKR2SGQNHTaT4kO3Vi1Tmlh9ilqExm
tdhFOLH/WLJWmp7lVhuRySHsAO3gHD6yuvrdlwudBRIDe+pE3p57aFppl3bzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUSzKHJQ9x/k/6wDBjlTk4YGNVlRwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqh6zANBgkqhkiG9w0BAQsFAAOCAQEAYom7
EoIyhKjtNVJM7hdSf/B+WRL0aqQANSOVfnNghP1NNfvlq33ghcSbyGB1d+NnXBQP
BNGgQzsxrpVjP9MVDp5+7cDQgBdaiB+zznkM9f4m87zTJPP/HymazBEIQyuadqeP
nhRfgEiecYSFT/qJUmdeLK1QPeORI4EGnbc+r0GoTekqKBxGZukl3m29jSe/icjR
WfEnTtlYPHx+38qLHr/SRIsRPi+Y5082DtSKqxeX/6bBZRngV4QSorwatZwUQm34
8GrpIowMP/FARhoAtFxaL2XtMqROPZTpWXv4WsAiX2DxoLWyeirw8hYtTA5KrKiM
QIVG1avfjge3sWJZQg==
-----END CERTIFICATE-----